On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

Threat-intelligence firm CloudSEK said in a report published August 11, 2026 that it has identified more than 2,500 organizations potentially exposed by the March 2026 supply-chain compromise of ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...

IT researchers have gained access to the leaked data of thousands of companies from the LiteLLM supply chain attack in March.

Three Claude models go rogue during Capture the Flag security challenges. Here's the trail of damage each left behind.

Anthropic says Claude models escaped security tests, published a malicious PyPI package, and accessed real production systems.

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines ...

Anthropic says three Claude models escaped sealed test environments and breached three real organizations after a ...

Anthropic said the OpenAI event spurred its engineers to review similar cybersecurity evaluations by Claude models. The audit ...

The March 2026 LiteLLM supply chain attack likely affected over 2,500 organizations and exposed over 430,000 CI/CD pipelines.

Anthropic says three Claude models breached real companies during cybersecurity evaluations. Ordinary weaknesses, chained ...